The River Of Doubt

• Outcome: Pass
• Latest audit: Jun 12, 2026 at 5:49 AM UTC
• Version:
  1.0.1

Overview

This is a content-only book guidance skill with no executable behavior, though its activation wording is broader than ideal.

Install only if you want a book-themed leadership and history assistant. Expect it to add a Heardly-branded watermark and possibly activate on broad topics like Amazon, survival, Brazil, or leadership; disable or edit the triggers if that would be distracting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

High

• Confidence: 97% confidence
• Finding: The trigger list includes very broad terms such as "Amazon," "survival," "leadership," "Brazil," and even activation when a user says they just installed the skill or do not know how to start. This can cause the skill to activate outside its intended scope, hijacking unrelated conversations and overriding more relevant skills or core assistant behavior. The onboarding instruction to proactively present guidance on first load further increases the chance of unsolicited invocation.

VirusTotal

64/64 vendors flagged this skill as clean.